Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Hd6FHVO-ybGff3zuTXphsqiu9CA.cer
File: Hd6FHVO-ybGff3zuTXphsqiu9CA.cer (raw, json)
Hash identifier: 2FcrQYboa0zI6UW9HFQvveMJbPMwW1IdbcD2N7B9noY=
Subject key identifier: 1D:DE:85:1D:53:BE:C9:B1:9F:7F:7C:EE:4D:7A:61:B2:A8:AE:F4:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DEA75914B81A345EE83EA911DD0A46
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/5531eb-dc9a-42ad-a5d6-43718f422b1f/1/Hd6FHVO-ybGff3zuTXphsqiu9CA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/5531eb-dc9a-42ad-a5d6-43718f422b1f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.200.200.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:a7:59:14:b8:1a:34:5e:e8:3e:a9:11:dd:0a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1dde851d53bec9b19f7f7cee4d7a61b2a8aef420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:00:27:07:83:00:1e:77:98:40:20:ce:fc:f1:
a6:33:73:b5:b1:c1:64:67:22:c8:c1:d6:1b:fb:2c:
c5:47:e8:d7:1e:35:a7:45:79:be:be:a9:28:a4:ab:
5a:b8:65:8c:4f:c0:c1:2b:8b:22:9c:10:13:14:19:
90:04:ab:cd:7a:1b:86:8a:00:c8:ac:ef:37:3b:87:
93:65:32:70:11:33:31:e0:40:28:18:1a:d8:aa:c5:
5b:29:c7:b8:ce:0f:c4:84:54:be:db:4a:61:10:b4:
d5:be:8e:1c:dc:7e:03:22:db:44:3e:4f:ef:b1:a2:
1e:a9:59:01:2b:fc:61:ab:1c:37:e7:87:f3:83:30:
3f:a4:72:dd:9b:62:93:00:63:59:cc:cb:b1:04:4f:
a2:21:2d:53:ef:c9:79:0f:11:b1:d4:14:62:2f:cc:
96:1e:2c:26:4f:3a:6a:a3:2a:72:68:7e:4d:37:52:
92:fd:d3:09:06:6b:fa:d3:90:7d:f1:80:01:e5:87:
96:ac:12:e6:9b:ba:02:67:4f:a8:75:d0:6d:dd:f6:
14:5d:72:13:4a:c1:89:ce:6b:b4:3d:87:51:d4:bb:
69:d8:65:df:2c:88:19:a7:fd:f7:83:a5:82:40:28:
57:2f:58:c4:98:cc:d5:c3:d3:1c:47:28:e7:d8:52:
df:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DE:85:1D:53:BE:C9:B1:9F:7F:7C:EE:4D:7A:61:B2:A8:AE:F4:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5531eb-dc9a-42ad-a5d6-43718f422b1f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5531eb-dc9a-42ad-a5d6-43718f422b1f/1/Hd6FHVO-ybGff3zuTXphsqiu9CA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.200.0/22
Signature Algorithm: sha256WithRSAEncryption
16:ab:a5:47:9e:34:aa:93:4b:f3:ac:22:3f:37:6a:5a:d4:1b:
24:dc:55:40:3f:a8:68:72:df:ce:fe:52:a3:1e:6b:2e:1d:e0:
97:ab:67:a4:5a:b8:78:d0:ec:18:a9:94:1d:b4:b5:be:c0:27:
79:69:0f:39:19:7d:27:8e:e1:38:12:a0:bb:1b:b2:f7:ba:10:
b0:db:2d:90:5c:a8:69:9d:b9:bc:93:d8:4c:7f:f8:06:11:32:
fc:25:07:67:4b:57:46:5d:67:31:fd:bc:17:f4:56:fc:ea:d1:
d6:bb:43:a9:3c:7a:5e:18:f6:84:64:e5:a1:4f:15:6e:23:a2:
f7:ce:09:e5:83:ef:eb:d6:9e:2d:23:4d:cf:f3:2c:7c:59:78:
04:9f:17:ef:58:7f:2f:b2:82:1f:96:c7:fb:c4:09:aa:89:43:
7a:df:ea:40:ae:e0:88:32:6f:f7:61:0d:61:53:6f:f2:88:9c:
ef:41:84:68:4f:60:98:2a:fc:25:34:59:b5:2a:25:51:93:59:
a0:eb:e1:9c:59:a5:25:db:b7:51:bf:7b:79:5e:ab:92:0d:2e:
b3:06:b1:da:b9:e0:c7:87:23:10:d2:53:cb:6b:54:f0:8d:18:
0a:0f:a8:cd:0c:af:e8:6c:9c:84:dd:7a:eb:eb:1e:35:f3:a6:
24:9c:44:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:38:09 2024 by rpki-client on console-ams.rpki-client.org